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1      Introduction 

The  size  of  the  elementary  deductions  that  a  computerized  verifier  is  able  to  carry  out  auto- 
matically is  directly  related  to  the  richness  of  its  inferential  core,  i.e.  the  collection  of  routines 
which  allow  the  verifier  to  certify  the  correctness  of  purported  proofs.  Thus,  in  the  last  decade, 
as  part  of  a  long  term  project  for  the  design  and  implementation  of  a  set-theoretic  based  proof 
verification  system,  jointly  conducted  at  New  York  University,  Catania  University  (Italy),  and 
ENID  ATA- Bologna  (Italy)  (cf.  [CS88]),  the  decision  problem  for  several  fragments  of  set  theory 
has  been  investigated  very  actively. 

Satisfiability  tests  (and,  dually,  validity  tests)  have  been  provided  for  numerous  classes  of 
unquantified  and  quantified  formulae  of  set  theory. 

The  basic  language  that  has  been  considered  is  MZ,5  (an  acronym  for  Multi-Level  Syllogistic), 
i.e.  the  unquantified  language  of  set  theory  with  =,  C,  and  G  as  predicate  symbols,  U,  fl,  and  \ 
as  function  symbols,  and  the  propositional  connectives  A,  V,  — ►,  <-►,  and  ->  .  A  decision  test  for 
Mi/5  has  been  first  given  in  [FOSSOa]. 

Subsequently,  many  extensions  of  MLS  with  various  other  set  operators  and  predicates  have 
also  been  shown  to  have  a  solvable  satisfiability  problem.  Here  we  cite: 

*This  work  has  been  partially  supported  by  ENI  and  ENIDATA  within  the  AXL  project. 


•  MZ,5  extended  by  ranfc  related  constructs  (see  [CFMS87,CCF88,CC88a]); 

•  MX5 extended  by  a  choice  operator  (see  [F087,CF088,Fer,PP,CFOP88]); 

•  MZ,5 extended  by  the  general  union  operator  (see  [CFS87])  and  by  the  powerset  operator 
(see  [CFS85,Can]); 

•  ML5 extended  by  map  related  constructs  (see  [FOS80b,CS]); 

•  A/I5  extended  by  cardinality  constructs  (see  [FOS80a,CC89]). 

Also,  some  quantified  classes  of  set-theoretic  formulae  properly  extending  MLS  have  been 
shown  decidable.  Specifically,  in  [BF0S81]  a  decision  procedure  has  been  given  for  the  (V)o 
simple  prenex  formulae,  namely  propositional  combinations  of  all  purely  universal  restricted 
prenex  formulae  of  the  form 

(Va;i  e  J/i)---(Vi„  e  J/„)V'  , 

such  that  no  x,  can  be  a  y^  (i.e.  quantified  variables  can  not  be  nested)  and  where  V'  can  involve 
=,  6  and  the  predicates 

is-an-integer{x)      and       is-an-ordinal{x). 

Recently,  [PP]  has  considered  the  case  in  which  nested  variables  are  allowed,  provided  that 
the  matrix  0  satisfies  certEiin  additional  conditions. 

Other  variants  of  the  quantified  case  have  also  been  studied  in  [CCF88]  and  [CC88b],  where 
decision  procedures  are  derived  when  the  operator  rank{x)  and  the  predicate  Finite{x)  are 
respectively  allowed  in  the  matrix  rp. 

Finally,  in  [Gog78]  ajid  [Gog79]  it  is  shown  the  completeness  of  two  classes  of  sentences  of 
set  theory. 

In  view  of  this  vast  body  of  results,  the  problem  to  set  "upper  bounds"  to  the  decidable 
is  then  of  the  utmost  importance  for  understanding  how  much  of  set  theory  one  can  hope  to 
mechanize. 

This  problem  has  been  recently  investigated  in  [PP88],  where  it  is  shown  that  Godel's  first 
incompleteness  theorem  can  be  proved  in  a  surprisingly  weak  theory  of  sets  with  formulae  of 
very  low  complexity.  As  a  consequence,  it  is  shown  that  the  satisfiability  problem  for  proposi- 
tional combinations  of  restricted  prenex  formulae  with  two  quantifiers  alternations  (the  so-called 
(V3V)o-formulae)  is  unsolvable. 

In  this  paper,  we  strengthen  the  preceding  undecidability  result  with  respect  to  the  complexity 
of  the  formulae  only,  the  underlying  theory  being  essentially  the  standard  Zermelo-Fraenkel 
set  theory.  In  particular,  we  will  show  that  just  one  quantifier  alternation  suffices  to  obtain 
undecidability.  This  class  of  formulae  will  be  denoted  by  (V3)o. 

In  particular,  we  will  show  how  to  effectively  associate  a  suitable  (V3)o-formula  tp  to  any  given 
polynomial  Diophantine  equation  D  in  such  a  way  that  if  is  satisfiable  by  a  set  model  if  and  only 
if  D  has  integer  solutions.  Then,  the  undecidability  of  the  (V3)o-formulae  will  follow  directly 
from  the  unsolvability  of  Hilbert's  tenth  problem,  i.e.  the  problem  to  decide  for  a  polynomial 


Diophantine  equation  whether  or  not  it  has  integer  solutions  (cf.  [Mat 70];  see  also  [Dav73]  and 
[DMR76]  for  beautiful  expository  accounts  on  Hilbert's  tenth  problem). 

As  by-products,  the  undecidability  of  other  classes  of  quantified  and  unquantified  formulae 
will  be  also  derived. 

If  the  clatss  of  (V)o-formulae  is  decidable  (as  we  conjecture)  then  our  result  allows  to  locate 
precisely  the  boundary  between  the  decidable  and  the  undecidable  in  set  theory. 

In  the  following  section,  we  will  give  some  basic  definitions;  then  in  Section  3  we  will  prove  the 
undecidability  of  two  variants  of  the  unquantified  theory  MLS  extended  by  cartesian  product 
and  cardinality  comparison  (theories  CART  and  UCART).  The  quantificational  case  will  be 
addressed  in  Section  4.  Finally,  in  Section  5  we  mention  some  open  problems  in  the  field  of 
computable  set  theory. 

2      Set-theoretic  preliminaries 

In  this  section  we  will  briefly  review  some  notions  of  set  theory  which  will  be  used  later. 

The  universe  of  sets  we  shall  consider  satisfies  the  Zermelo-Fraenkel  axioms  of  set  theory  (see 
[Jec78]  or  [Lev79]  for  a  complete  description  of  the  subject). 

A  pairing  function  (-,  •)  is  any  two  argument  function  such  that 

(si,52)  =  {hih)  if  and  only  if  si  =  t\  h  S2  =  i2  ■, 

for  any  sets  5i,52»'i)^2- 

Pairing  functions  can  be  represented  in  several  ways.  To  be  specific,  we  will  adopt  the 
Kuratowski's  definition  of  ordered  pair 

(«1,52>  =Def  {{si},{5l,S2}}  • 

Given  two  sets  si  and  52,  their  cartesian  product  si  x  52  is  given  by 

s\  X  52  =Def  {(«i,4>  :  «i  e  «i  A  52  e  52}  . 
Then  a  map  f  (from  5i  into  52)  can  be  defined  as  any  subset  of  5i  X  52  such  that 

for  all  Sj  G  5i  there  exists  a  unique  s'^  G  52  (denoted  by  f{s'-^))  such  that  (51,52)  G  /. 
We  also  recall  that  an  ordinal'is  any  set  5  such  that  the  following  two  conditions  are  satisfied: 

(a)  (Vu)(Vv)  ((u  G5At;G5)— >(uGvVu  =  vVvG  «)),  i.e.  5  is  well  ordered  by  the  member- 
ship relation  G; 

(b)  (Vu)(u  G  5  — »  u  C  5),  i.e.  s  is  transitive. 

It  is  easily  seen  that  0  is  an  ordinal;  moreover,  if  q  is  an  ordinal  so  is  a  U  {q},  which  is  called 
the  successor  of  a,  otherwise  written  as  a  +  1.  This  provides  the  von  Neumann  representation 
of  natural  numbers  as  'finite'  ordinals 

n  =  {0, 1,. .  .,n  -  1}  . 


An  ordinal  is  said  to  be  limit  if  it  is  not  the  successor  of  any  other  ordinal.  Examples  of  limit 
ordinals  are  0  and  lj  =  {0, 1, 2, . . . ,  n, . . .},  i.e.  the  set  of  all  finite  ordinals.  An  ordinal  which  is 
not  a  member  of  u>  is  infinite. 

The  cardinality  of  a  set  s,  denoted  by  |5|,  is  the  minimum  ordinal  a  such  that  there  is  an 
injective  map  from  5  in  a  and  viceversa.  Thus,  |si|  <  |52|  holds  if  there  is  an  injection  from  si 
into  52;  if  in  addition  there  is  no  injection  from  S2  into  sj.  then  |5i|  <  |s2|. 

Notice  that  for  any  two  sets  Si  and  S2, 

\si  X  52I  =   l^il  -1521  • 

To  simplify  the  presentation  in  Section  4,  it  will  result  more  convenient  to  consider  weaker 
notions  of  cartesian  product  and  maps.  Specifically,  we  define  the  unordered  cartesian  product 
si  ®  52  of  two  sets  5i  and  52  as  the  set  of  cdl  unordered  pairs  of  elements  of  S\  and  52,  i.e. 

Sl  ®  52  =Def  {{s'u-Sj}  :  5i   G  5i  A  Sj  6  S2}   . 

Observe  that,  in  general, 

\S\  ®  52I   <   |5i|  •  I52I  . 

If  in  addition  s\  and  52  are  disjoint,  then 

|«1  ®S2\  =  \S\\  ■  \S2\  . 

An  unordered  map  h  from  si  into  52,  provided  that  5x  D  52  =  0,  is  any  subset  of  S\  ®  52  such 
that 

for  all  5i  G  5i  there  exists  a  unique  52  6  52  (again  denoted  by  /i(si))  such  that  {si,52}  G  h. 

Unordered  maps  enjoy  much  the  same  properties  as  ordinary  maps,  the  main  difference  being 
that  when  dealing  with  unordered  maps  one  has  to  provide  explicitly  a  way  to  distinguish  between 
the  'first'  and  'second'  components  of  their  members.  This,  for  instance,  can  be  accomplished 
by  specifying  a  set  which  contains  the  domain  of  the  map  and  is  disjoint  from  its  range.  Thus, 
if  h  is  an  unordered  map  with  domain  contained  in  the  set  Si  (and  range  disjoint  from  5i),  then 

h[s]  =Def  {t'  i  s  :  {s\  i'}  G  h  for  some  5'  G  5}  . 

Finally,  we  recall  that  the  general  union  of  a  set  5  is  the  set  of  all  elements  of  elements  of  5, 
i.e.,  formally, 

Un(s)  =Def  {t  '-t  E  u  for  some  u  G  s)  . 


3      The  unquantified  theories  CART  and  UCART 

From  the  unsolvability  of  Hilbert's  tenth  problem  (cf.  [Mat70]),  it  follows  immediately  that  there 
is  no  algorithm  to  test  whether  a  system  of  equations  of  the  following  types 

r  ^  =  v 

^  =  v  +  C  (1) 

[  ^  =  k 

(where  ^,  77,  and  C  stand  for  integer  variables  and  k  stands  for  an  integer  constant)  has  an  integer 
solution  or  not^.  Furthermore,  for  technical  reasons,  we  can  assume  without  loss  of  generality 
that  no  equation  of  type  (1)  can  contain  multiple  occurrences  of  the  same  variable.  We  will  refer 
to  such  equations  as  simple  equations. 

In  this  section  we  will  show  that  the  predicate 

issolvable{T,)  , 

which  is  true  if  and  only  if  the  system  E  of  simple  equations  has  an  integer  solution,  can  be 
effectively  expressed  in  an  elementary  unquantified  fragment  of  set  theory  (denoted  CART), 
involving  only  the  ordinary  Boolejin  set  operators,  the  cartesian  product  operator,  and  the 
cardinality  comparison  predicate. 

More  precisely,  CART  is  the  propositional  combination  of  formulae  of  the  following  type 

i  =  j/Uz,     x  =  ynz,    x  =  y\z, 
x  =  yxz,    \x\<\y\,      |x|<|y|. 

We  wiU  provide  a  transformation  that  given  a  system  of  simple  equations  S  will  yield  an 
unquantified  formula  (^£  of  CART  such  that 

is-solvableCE)  is  true  if  and  only  if  tp^  is  satisfiable^. 

Thus  the  unsolvability  of  Hilbert's  tenth  problem  will  imply  at  once  the  undecidability  of  CART. 

Let  E  =  {El, . . . ,  E„}  be  a  system  of  simple  equations  Si, ... ,  En.  For  each  integer  variable 
^  in  E  we  introduce  n  distinct  set  variables  iL . . . ,  x?. 

Let  ipo  denote  the  conjunction  of  all  literals 

x\  n  xi,  =  0, 
for  all  (^,  i)  ^  (^,i),  with  ^,t)  occurring  in  E  and  1  <  i,j  <  n,  and  of  all  the  literals 

l^^l  =  Wil 

Throughout  the  paper,  by  integer  numbers  we  will  always  mean  nonnegative  integer  numbers. 
We  recall  that  a  set-theoretic  formula  ip  is  satisfiable  if  there  exists  an  assignment  of  sets  to  the  free  variables 
of  If  which  makes  (p  true. 


for  all  ^  occurring  in  S,  1  <  i  <  j  <  n. 
For  all  i  =  1, . . . ,  n,  we  put 

|x^|  =  |ii,|  if  E,  is  of  type  ^  =  t) 

<Pi=Defl    |x^|  =  |4uar^|     if  E.  is  of  type  ^  =  7? +  C  (2) 

_   |i^|  =  \x\j  X  x^l     if  S,  is  of  type  ^  =  t?  •  C  • 

Observe  that  if  Ej  is  of  type  ^  =  k,  with  k  an  integer  constant,  then  (2)  does  not  define  (/?,.  To 
deal  also  with  such  equations,  we  need  to  show  that  the  singleton  operator  (and  therefore  finite 
enumerations)  is  expressible  within  CART.  This  is  done  in  the  following  lemma. 

LEMMA  3.1    The  literal  x  =  {y}  is  expressible  in  CART. 

Proof.  Observe  that  if  S3  =  si  XS2,  then  c  6  53  if  and  only  if  there  exist  a  €  5i,  6  G  52  such  that 

c  =  {{a},  {a, 6}}. 

Thus,  X  =  {y}  is  equisatisfiable  with  the  following  formula: 

yexAxEcAcEsi  X  S2  Ab'  e  c  A  x  C  b'  A  x  ^  b'. 

It  is  an  easy  matter  to  see  that  the  above  formula  can  be  written  using  only  the  constructs 
allowed  in  the  theory  CART.  ■ 

Remark  3.1  By  Lemma  3.1,  finite  enumerations  are  also  expressible  in  CART,  by  inductively 
putting 

{ll ,  .  .  . ,  X„]  =Def  {Xl,  .  •  . ,  Xn-l}  U  {x„}. 


Let  K  be  the  largest  integer  constant  occurring  in  E,  and  let  vi,...,Vfc  be  A'  distinct  new 
variables.  Then,  for  every  simple  equation  E,  of  type  ^  =  k,  with  k  an  integer  constant,  we  put: 

'Pi  =De{\x\\  =  \{Vi,...,Vk}\. 

Also,  we  put 

Vn+l   =Def         /\         Vi  ^  Vj. 
l<i<j<K 

Notice  that  Ar=i^  fi  has  a  set  model  if  and  only  if  the  system  E  has  a  solution  in  the  class  of 
all  cardinal  numbers.  Thus,  to  complete  the  reduction  of  Hilbert's  tenth  problem  to  CART,  we 
only  need  to  show  that  the  predicate  Finite{x)  is  expressible  in  CART,  where  Finite{x)  is  true 
if  and  only  |a;|  <  lj.  This  is  proved  as  follows. 

Recall  that  a  set  s  is  finite  if  and  only  if  it  is  empty  or  it  is  not  equinumerous  with  any  of  its 
proper  subsets.  In  particular,  if  s  is  not  equinumerous  with  any  of  its  proper  subsets  obtained  by 
discarding  just  one  element,  it  cannot  be  equinumerous  with  any  other  proper  subset  of  its.  On 


the  other  hand,  every  infinite  set  is  equinumerous  with  any  of  its  subsets  obtained  by  discarding 
one  element.  Thus,  the  predicate  Finite{x)  is  equisatisfiable  with  the  formula 

i  =  0V(j/Gi  A  \x\{y}\  <  \x\), 

which  can  easily  be  rewritten  as  a  formula  in  CART. 

Hence,  denoting  by  v?n+2  the  conjunction  of  all  literals 

Finite{x^)  , 

with  ^  occurring  in  E,  it  follows  from  our  construction  that  the  predicate  is^olvable{T,)  is 
equisatisfiable  with  the  formula 

n+2 

VE  =Def  A  'r'i-  (^) 

t=0 

As  already  observed,  every  conjunct  in  (3)  can  easily  be  written  by  using  only  constructs  in 
CART.  Thus,  summing  up,  by  the  unsolvability  of  Hilbert's  tenth  problem,  we  have 

THEOREM  3.1    The  unquantified  theory  CART  has  an  undecidable  satisfiability  problem.  □ 

The  same  result  also  holds  if  in  place  of  the  ordinary  cartesian  product  X,  the  unordered 
cartesian  product  (g)  is  considered.  Calling  UCART  the  corresponding  class  of  formulae,  in  view 
of  the  preceding  discussion  we  only  need  to  show  that  the  singleton  operator  caji  be  expressed 
in  UCART  too.  We  have 

LEMMA  3.2    The  literal  x  =  {y}  is  expressible  in  UCART. 

Proof.  U  S3  =  si  ®  52,  then  c  G  S3  if  and  only  if  there  exist  a  £  S\,b  e  S2  such  that  c  =  {a,b]. 
Thus  the  literal  x  =  {y}  is  equisatisfiable  with  the  formula 

y  e  I  A  I  C  x'  A  I  7^  i'  A  i'  G  zi  (E>  22  • 


Therefore  we  have: 
THEOREM  3.2   The  unquantified  theory  UCART  has  an  undecidable  satisfiability  problem.  D 


In  the  following  section  we  will  further  reduce  the  satisfiability  problem  for  UCART  to  the 
satisfiability  problem  for  some  classes  of  unquantified  formulae  of  set  theory. 


4      The  quantified  case 

In  this  section  we  prove  the  undecidability  of  some  clcisses  of  quantified  formulae  of  set  theory. 

DEFINITION  4.1  Let  L^  be  the  first  order  language  with  identity  consisting  of  an  unlimited 
supply  of  set  variables  xq,  ii, . . . ;  G  and  =  as  only  relational  symbol;  the  propositional  connectives 
A,  V,  — ►,  ^,  and  ->;  the  quantifiers  V  and  3.    We  will  indicate  by: 

•  Ao  the  collection  of  formulae  of  L^  which  do  not  contain  unrestricted  quantifications,  i.e. 
all  quantifiers  are  of  type  (Vi  G  y)  and  {3x  G  y)  only; 

•  (V3V  •  •  •  Qn)o,  where  Q„  is  either  3  or  V  according  to  whether  n  is  even  or  odd,  the  collection 
of  Ao-formulae  which  can  be  transformed  into  logically  equivalent  conjunctions  of  prenex 
formulae  of  L^  with  at  most     n  -  1     quantifiers  alternations.  □ 

The  following  are  examples  of  (V)o-formulae: 

•  2  G  I  A  (Vj/  G  i)(Vt;  G  y){v  G  i) 

•  (Vr  G  x){v  G  J/  V  V  G  2)  A  (Vr  G  y)(v  £  x)  A  (Vv  G  z){v  G  x)  , 
whereas  the  following  is  a  (V3)o-formula 

•  (V«  G  x){3v  G  y){u  e  v)A  (Vi;  G  y)(Vtr  G  v){w  G  x)  . 

Let  Wi  be  the  extension  of  the  class  oT  (V)o-formulae  with  unquantified  literals  of  type 
X  =  y  ®  z  and  x  =  Un(y). 

Then  we  have  the  following  result 

THEOREM  4.1    The  theory  Tii  has  an  undecidable  finite  satisfiability  problem^. 

Proof.  Since  the  Boolean  set  operator  U,  D,  and  \  are  immediately  expressible  by  (V)o-formulae, 
then,  in  view  of  Theorem  3.1,  it  is  enough  to  prove  that  positive  literals  of  type  |i|  <  \y\  are  also 
expressible  in  Wi. 

Recall  that,  by  definition,  |x|  <  \y\  holds  if  and  only  if  there  is  an  injective  map  from  x 
into  y.  We  show  that  under  the  assumption  that  x  and  y  are  disjoint,  maps  from  x  into  y  can 
be  represented  as  subsets  of  x  ig)  j/  by  using  (V)o-formulae  supplemented  with  clauses  of  type 
X  =  Un{y)  to  express  the  domain  of  such  maps. 

Let  the  predicate  is-a-map{f,x,y)  stand  for 

/  C  X  ®  y  A  X  C  Un{f)  A  {Vf[  G  /)(V/^  G  /)(Vx'  G  x)  ((x'  G  /^  A  x'  G  /^)  -  /{  =  /^)  . 

It  is  immediate  to  see  that  if  M  is  any  set  assignment  satisfying  the  clause  is-a.map{f,  x,  y),  and 
such  that  Mx  f)  My  =  0,  then  the  following  facts  hold: 

^A  set-theoretic  formula  ip  is  said  to  be  finitely  satisfiable  if  ^J  has  a  model  in  which  every  free  variable  is 
mapped  into  a  finite  set. 


(a)  M  f  is  a  set  of  unordered  pairs  contained  in  Mx  ®  My; 

(b)  for  each  s  G  Mx  there  is  a  <  €  My  such  that  the  unordered  pair  {«,<}  is  in  A//,  i.e.  the 
domain  of  M  f  with  respect  to  Mx  is  the  whole  Mx; 

(c)  if  {5, f },{«,<'}  G  M/,  with  s  G  Mi,  then  t  =  t\  i.e.  A//  is  singlevalued. 

Thus,  X  r\  y  =  0  A  is.a-map{f,x,y)  expresses  that  /  is  an  unordered  map  from  i  into  y  (see 
Section  2).  Also,  if  we  denote  by  injective{f,  x,  y)  the  formula 

is.a.map{f,  x,  y)  A  (V/i  G  /)(V/^  G  /)(Vj/'  G  y)  {(y'  e  f[  A  y' e  f!,)  ^  f[  =  f'2)   , 

it  is  plain  that  ar  n  y  =  0  A  injective{f,x,y)  expresses  that  /  is  an  injective  unordered  map  from 
X  into  y.  Thus,  a:  n  j/  =  0  A  injective{f,x,y)  is  equisatisfiable  with  x  ("I  y  =  0  A  |i|  <  |t/|. 

To  get  rid  of  the  extra-assumption  x  n  y  =  0,  one  can  introduce  new  variables  xi  and  yi 
which  stand  for  disjoint  sets  having  the  same  cardinality  of  x  and  y  respectively.  Thus,  |x|  <  |y| 
is  equisatisfiable  with 

xnxi  =  0A2/nj/i  =  0Aiinj/i  =  0 

Ainjective{fi,x, xj)  A  injective{f2,Xi,x)  A  injective(f3,  y,  yi) 
Mnjective{f4,yi,y)A  injective{f5,Xi,yi)  . 

Observe  that  all  constructs  of  CART  with  the  only  exception  of  the  predicate  jx]  <  \y\  have  been 
expressed  with  formulae  of  the  theory  Ti\.  In  the  undecidability  results  of  the  preceding  section, 
the  predicate  |x|  <  \y\  has  been  used  only  to  show  that  the  predicate  Finite{x)  was  expressible. 
It  appears  that  to  express  |x|  <  \y\  a  quantifier  alternation  is  needed.  Therefore  at  this  stage  we 
can  only  conclude  that  the  finite  satisfiability  problem  for  Hi  is  unsolvable.  ■ 

As  immediate  corollaries  we  obtain: 

COROLLARY  4.1    The  extension  'H2  of  the  theory  'Hi  with  unquantified  clauses  of  type  Finite{x) 
has  an  unsolvable  satisfiability  problem.  □ 

COROLLARY  4.2  The  extension  Tiz  of  the  theory  Hi  with  unquantified  literals  of  type  x  £  u, 
where  u  denotes  the  first  infinite  limit  ordinal,  has  an  unsolvable  satisfiability  problem. 

Proof.  It  is  enough  to  observe  that  Finite{x)  is  equisatisfiable  with  y  G  w  A  |x|  =  \y\.  ■ 

Next  we  show  that  all  constructs  of  the  theory  H3  are  expressible  by  (V3)o-formulae,  therefore 
proving  the  undecidability  of  this  latter  theory.  Obviously,  we  only  need  to  show  that  all  literals 
of  type  X  =  Un{x),  x  =  y®  z,  and  the  constant  w  are  expressible  by  (V3)o-formulae. 

Literals  of  type  x  =  Un{y): 

By  definition,  x  =  Un{y)  is  logically  equivalent  to  the  (V3)o-formula 

(Vx'  G  x)(3y'  G  y)(x'  G  y')  A  (Vy'  G  y)i^y"  G  y'W  G  x)  . 


Literals  of  type  x  =  y  ®  z: 
Consider  the  formula* 

A     =Def     (Vx'  €  i)(Va:'i'  £  x'){'ix'i  e  x')(Var^'  €  x'){x'i  =  x'^  V  x'/  =  x^'  V  x^'  =  x^') 
-P     =Def     Un{x)  Cy\Jz 

c   =Det   W  e  y)i^z' e  z)i3x' e  x)(y' e  x' A  z' e  z) . 

Plainly,  A  says  that  x  is  a  set  of  unordered  pairs,  B  says  that  the  elements  of  each  unordered  pair 
in  X  belong  to  yU  z,  and  C  says  that  any  unordered  pair  oi  y  ®  z  is  contained  in  some  element 
of  X.  Thus  A  A  B  AC  is  equisatisfiable  with  x  =  y  ^  z. 
Notice  that  at  this  point  from  Corollary  4.1  we  have 

LEMMA  4.1    The  class  of  {'^3)Q-formulae  has  an  unsolvable  finite  satisfiability  problem.       D 

The  constant  u: 

Let  is.an-OTxiinal{z)  stand  for  the  (V3)o-formula 

(Vz;  e  2)(V4  €  z){z[  =  z^  V  2i  e  4  V  z^  €  z{)  a  (v/  e  z)(v/'  e  z'){z"  e  z) .         (4) 

Also,  denote  by  in  finite  Jimit-ordinal{z)  the  formula 

is-an.ordinal{z)  A  0  6  2  A  (V2J  G  2)(34  G  2)(2j  G  4)  •  (5) 

Plainly,  if  Af  satisfies  infinite Jimit-ordinal{z),  then  Mz  must  indeed  be  an  infinite  limit  ordinal. 
In  fact,  from  the  first  conjunt  of  (4),  Mz  is  well-ordered  by  G.  In  addition,  the  second  conjunct 
of  (4)  forces  Mz  to  be  transitive.  Thus,  Mz  is  an  ordinal.  Finally,  the  last  two  conjuncts  of  (5) 
imply  that  Mz  is  an  infinite  limit  ordinal. 

In  addition,  notice  that  the  predicate  y  =  f[x],  i.e.  y  is  the  image  under  /  of  the  set  i,  where 
/  is  an  unordered  map,  is  expressed  by  the  following  formula: 

(Vj/'  G  j/)(3/'  G  /)(3x'  G  x)iy'  G  /'  A  x'  G  /') 

A(V/'  G  /)(Vy'  G  /')(Vx'  G  x)  ((x'  #  j/'  A  x'  G  /')  -  y'  G  j/)  . 

We  claim  that  the  following  (V3)o-formula  characterizes  the  constant  oj. 

infiniteJimit.ordinal{z)  A  Zili  Z2  =  z  A  Zi  H  Z2  =  9 
Ais-a-map{f, zi,Z2)  A  is-a.map{g, Z2,Z\) 
A(Vz;  G  2i)(3/'  G  /)(3/"  G  /')(/"  G  22  A  .r;  G  /"  A  z[  £  /') 
A(V4  G  Z2){3g'  G  g){39"  G  g'){9"  G  21  A  4  G  g"  A  4  G  5') 

A/[2l]  =  22\{0}A5[z2]  =  2l\{0}  (6) 

Notice  that  by  using  the  usual  notation  of  point  map  evaluation,  the  sixth  and  seventh 
conjuncts  of  the  above  formula  could  have  been  rewritten  respectively  as 
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and 

(Vz^  G  r2)(4  e  5(4))  ■ 
We  have  to  prove  that 

/.  (6)  is  satisfiable,  and 

II.  Mz  —  Lj,  in  any  model  M  of  (6). 

Concerning  7,  it  is  an  ezisy  matter  to  verify  that  the  following  assignment  M  satisfies  (6). 

Mz  =  u 

Mz\  =  {2n  :  n  G  w)     (=  Weven) 

A/ 22  =  {2n  +  1  :  n  6  w}     (=  u;odd) 

M/  =  {{2n,2n  +  l}  :nGu;} 

Mfif  =  {{2n- l,2n}  :n  e  w\{0})  . 

Next  we  prove  II.  So,  let  M  be  a  model  of  (6).  Let  (  =  Mz,  Z\  =  Mzi,  Z-i  =  Af  22,  Fq  -  A//, 
F\  =  Af</.  Since  0  G  C  =  •^i  U  Z2,  we  can  assume  without  loss  of  generality  that  0  G  Zi.  Then 
we  claim  that 

"even  Q  ^0  ,       ^^odd  Q  ^1  (7) 

and,  for  all  n  G  w, 

JFb(2n)  =  2n  +  l         and        Fi(2n  + 1)  =  2n  +  2  .  (8) 

We  will  prove  (7)  and  (8)  by  induction  on  n. 
Let  p(j)  be  the  parity  function  defined  by 

,  ..  _  j    0      if  J  is  even 
^^^'~  \  1     ifj  isodd. 

Assume  that  j  G  ^p(j),  for  all  j  <  n,  and  that,  additionally,  if  j  +  1  <  n  then  ■Fp(j)(j)  =  j  +  1. 
Then  we  need  to  show  that  n  G  ^p{n)  ^.nd  i^p(n-i)("  —  1)  =  n.  Since  by  (6)  n  G  -fbf^o]  U  F\\Z\\, 
then  F.oOo)  =  ")  for  some  lo  G  {0,1},  jo  G  {0,l,...,n  -  1}.  Observe  that  jo  =  "  —  l?  for 
otherwise  -Fp(jo)(io)  =  jo  +  1  <  "•  Thus,  iq  =  p(n  -  1)  and  Fp(„_i)(n  -  1)  =  n,  so  that  we  have 
also  n  G  -^i_p(„_i)  =  ■^p(n)- 

From  (7)  and  (8),  it  follows  that  Afz  =  w.  Indeed,  if  Mz  =  ^  >  w,  then  w  G  C  =  ■^o  U  Zi, 
and  hence  iWo(io)  =  '^'i  for  some  iq  G  {0, 1}  and  jo  G  w.  But  this  is  a  contradiction,  since,  by 
(8),  Fig  (jo)  =  jo  +  1-  This  proves  that  Mz  =  u. 

From  Corollary  4.2,  it  then  follows 

THEOREM  4.2   The  class  of  {'i3)o-formulae  is  undecidable.  □ 
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5      Open  problems 

In  the  previous  section  we  showed  that  the  satisfiability  problem  for  the  class  (V3)o  is  undecidable. 
To  settle  down  the  decidability  question  for  the  entire  hierarchy  Aq  (see  Definition  4.1),  the  main 
problem  which  remains  to  investigate  is  the  satisfiability  problem  for  the  (V)o-formulae.  As  we 
mentioned  in  the  introductory  section,  we  conjecture  that  such  a  clciss  is  decidable.  Evidence  for 
this  is  that  in  the  absence  of  the  axiom  of  foundation,  the  (V)o-formulae  can  be  decided  by  the 
same  procedure  given  in  [BF0S81]  for  the  subclass  of  simple  prenex  formulae. 
At  any  rate,  notice  that: 

•  a  positive  answer  to  this  question  will  stress  the  need  to  investigate  the  decidability  problem 
for  all  the  intermediate  classes  of  formulae  as,  for  instance,  the  theory  Tii  (cf.  previous 
section); 

•  on  the  other  hand,  a  negative  answer,  will  bring  to  attention  all  the  unquantified  theories, 
which  have  not  been  investigated  yet,  as  for  instance, 

—  MLS  extended  by  the  cartesian  product, 

—  MLS  extended  by  the  powerset  and  the  general  union  operators. 
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